6e1ba5af50c0a93c54fe595712dbbf38532d6ab694ef0472c1ca3283843710cf

Analysis

max time kernel
110s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
16/10/2024, 22:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
6e1ba5af50c0a93c54fe595712dbbf38532d6ab694ef0472c1ca3283843710cf.apk
Size 4.7MB
Sample241016-2c2wvswflg
SHA256 6e1ba5af50c0a93c54fe595712dbbf38532d6ab694ef0472c1ca3283843710cf
MD5 806b0448cbf6d19d0208fa08dca5e191
SHA1 c08a2de8fe121f7013cd752b2c24bcec4348e629
SHA512 629621a2f59c7f07a07157895f284b8a81a6907c8dfa7a9da4267ac9a458fe0f4ffc179db568aa664d256e26e1389c51c431c6f21d64deedc3d1a5e44e3bacd6
SSDEEP 98304:UvVrWH3S7neMSH+GSUSiWbr01oqbv5+OsmUd2ZrYuvWUD:uVq34eMSMrw4m0UD
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.google.mailter

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.google.mailter

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.google.mailter

com.google.mailter
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4666

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

20241016222714733.log

Path /data/data/com.google.mailter/logs/20241016222714733.log
Size 22KB
SHA256 f0a02940b15ccbb7d6a7d500ce86a72f63ff900255214fd7bd6f894ac4149a18
MD5 2e86279b9b5454cec37443b7760debe3
SHA1 c9109788c19772995e60a8850a65977501b98836
SHA512 b1498710ad23b3bcd2e0bf626c5adef2c5f5cd3bab8bc87dbe550af4b83c461842b2740950cc3c63c40825eead41be1adbd74f28d9933fed9cfe8c95c9a4eab7
SSDEEP 192:3Y3u31jFHJBPrXJGBu50tDn0nb1MctGtswTDb1DN6FxYUaDF1ygjL8bOEZkA4EDE:3Y3w1BU9fF3si
MD5 SHA1 SHA512 SSDEEP

Submit Download

20241016222714736.log

Path /data/data/com.google.mailter/logs/20241016222714736.log
Size 33KB
SHA256 79b01bba029694e1a14f050ac0e2dfefb9678424886f70237e36b1860b4f1da6
MD5 1f40bbe1204be6d344dbe43c3073e30b
SHA1 0ac4e1aa9e5fc6d5ec15d7edaf5d1594319eff33
SHA512 85c64f507d85fa1370c98a1242eb8f4587af19590032e3438fb76e29d23273d17ddf48b181a1e3f7f40a6371e2f1461d34c5d0fb3133b699e89403efaddccfb2
SSDEEP 768:4HIOJU5eqxXxevb6K3Uw7B7ATOYwCVxIM3ndJqtRxK23f1oaG9Ul8JUPQkooTnOn:4HIOJU5eqxXxevb6K3Uw7B7ATOYwCVxV
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb

Path /data/data/com.google.mailter/no_backup/androidx.work.workdb
Size 4KB
SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
MD5 7e858c4054eb00fcddc653a04e5cd1c6
SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-journal

Path /data/data/com.google.mailter/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 3c3eb78dba904b51a1f7a5ca83c542d84b814dfebd05b28b854b96685739f2f3
MD5 78c50e4bcf2a711a7fc40c43954e4310
SHA1 6b079d6ba838a0d68165adda896bc73e3bb052d4
SHA512 d4344cafeb304fa699a6abe559c7b0312c24e62a796c9021882edb7ff78f6a40fdab99e1a3a116c4e1102fa40283f3c04c398623c816a6edbfc505a1ce4b4c0f
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/com.google.mailter/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.google.mailter/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 c350b34c7b2abc10fc6cea9f4ab4a2c19b1eb310deeb8450cab91da9e5025cb8
MD5 4a33ce5e4d74494c3c9bff20bdb2b356
SHA1 13fa678d79599296544d5dc6ff7b497eddb975a0
SHA512 18ecf932a58e4fb451f0ac8194671bdc9fffad40e23b7639b0d2bbeb48af89719ac0da67c30c1beaaa57bcfd99a9f33f90636002085256b1894b846eaf8e2db2
SSDEEP 12:KzpqpAvtTpqHzdeWRmBEyPbP/dpq8oOw2:KtqKqHzKGSP/Hq8S2
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.google.mailter/no_backup/androidx.work.workdb-wal
Size 108KB
SHA256 49ba073f98fc659795bfbb96d673d188d39093904c27af6fe628a08b0754f943
MD5 c9f241c31862b50c6a99431bc01b174f
SHA1 c3e55b6f531995dcb7521412045f0c24180fbdde
SHA512 0eb9808dcdcfa5beaa0adf18b52339023b611622ad74ce6ee0957aa48602930bb69b3c165ab5893e370f01298f5cf539d516ad554684d86b13b2bb54aa901548
SSDEEP 96:EA6+hdjnHtDRMpf8UzS6+BD8q0ExP/Emq62TvQw+f29/Kb++qjOsa8:PdjnHt9Mpf8UzS6+BD8q0E5Tt8
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads